Showing posts with label id. Show all posts
Showing posts with label id. Show all posts
Monday, May 25, 2015
Touch ID Bypass Detailed Average Consumer Shouldnt Worry
Over the weekend, the Chaos Computer Club announced that it had bypassed Apple’s Touch ID sensor using a photograph of a fingerprint to create a fake fingerprint model.
The full fingerprint emulation process has now been detailed in a new video from CCC member Starbug and replicated by security expert Marc Rogers, who believes the average consumer has nothing to worry about.
As seen in the video, the CCC uses a fingerprint taken from the screen of the iPhone 5s and then uses a complicated multi-step process to convert it to a usable print. According to Starbug, who spoke to Ars Technica, the process "was way easier than expected," taking just 30 hours to complete.
I was very disappointed, as I hoped to hack on it for a week or two. There was no challenge at all; the attack was very straightforward and trivial.
The Touch ID is nevertheless a very reliable fingerprint system. However, users should only consider it an increase in convenience and not security.
While Starbug suggests that the hack is "very easy" and can be completed with "inexpensive office equipment like an image scanner, a laser printer, and a kit for etching PCBs," Marc Rogers, who also completed the bypass, disagrees, noting that it requires "over a thousand dollars worth of equipment."
But, the reality is these flaws are not something that the average consumer should worry about. Why? Because exploiting them was anything but trivial.
Hacking TouchID relies upon a combination of skills, existing academic research and the patience of a Crime Scene Technician.
Rogers goes on to explain the process, which requires an unsmudged, complete print of the correct finger and a way to “lift” the print using cyanoacrylate (super glue) fumes, fingerprint powder, and fingerprint tape. The lifted fingerprint must then be photographed, edited, and printed onto transparency film, where it is converted to a usable fingerprint via a PCB board or a laser printer.
Even when all of these steps are created, using the fake fingerprint was "tricky" and prone to failure.
Even when all of these steps are created, using the fake fingerprint was "tricky" and prone to failure.
So what do we learn from all this?
Practically, an attack is still a little bit in the realm of a John le Carré novel. It is certainly not something your average street thief would be able to do, and even then, they would have to get lucky. Don’t forget you only get five attempts before TouchID rejects all fingerprints requiring a PIN code to unlock it.
However, let’s be clear, TouchID is unlikely to withstand a targeted attack. A dedicated attacker with time and resources to observe his victim and collect data, is probably not going to see TouchID as much of a challenge. Luckily this isn’t a threat that many of us face.
With Touch ID able to be bypassed through a fake fingerprint, it remains unclear how the system functions. According to Apple, the sensor uses advanced capacitive touch and takes a high-resolution image from the “sub-epidermal layers” of skin, a process that, theoretically, should render a fake fingerprint useless. Starbug speculates that this is due to Apples desire for usability over security, noting that the sensor will be defeated if the fake fingerprint is "sufficiently close" to the characteristics of human tissue.
Since its release, Touch ID has been the subject of much scrutiny. Senator Al Franken has sent a letter to Tim Cook asking a number of questions about the security of the system and the exact fingerprint storage process, and Apple has published an extensive knowledge base article about the benefits of the Touch ID system to alleviate some consumer concerns.
Since its release, Touch ID has been the subject of much scrutiny. Senator Al Franken has sent a letter to Tim Cook asking a number of questions about the security of the system and the exact fingerprint storage process, and Apple has published an extensive knowledge base article about the benefits of the Touch ID system to alleviate some consumer concerns.
Data source: via MacRumors (By Juli Clover)
Friday, May 22, 2015
Apple Releases iOS 7 1 1 With Touch ID Improvements and Bug Fixes
The new update labled as built (11d201), it comes with additional improvements to Apples Touch ID, the extermination of a bug that was impacting keyboard responsiveness, and fixes a bug involving Bluetooth keyboards with VoiceOver enabled. iOS 7.1.1 also includes Safari support for new top-level domains like photo and camera.
This update contains improvements, bug fixes and security updates, including:
- Further improvements to Touch ID fingerprint recognition
- Fixes a bug that could impact keyboard responsiveness
- Fixes an issue when using Bluetooth keyboards with VoiceOver enabled
You can download iOS 7.1.1 via an OTA update on your device, or through iTunes, or you can grab the version you need in the download links below:
- Apple TV 2G (AppleTV2,1) version 6.1.1 (Build 11D201c), Download
- Apple TV 3G (AppleTV3,1) version 6.1.1 (Build 11D201c), Download
- AppleTV3,2 (AppleTV3,2) version 6.1.1 (Build 11D201c), Download
- iPad 2 (Wi-Fi) (iPad2,1) version 7.1.1 (Build 11D201), Download
- iPad 2 (GSM) (iPad2,2) version 7.1.1 (Build 11D201), Download
- iPad 2 (CDMA) (iPad2,3) version 7.1.1 (Build 11D201), Download
- iPad2,4 (iPad2,4) version 7.1.1 (Build 11D201), Download
- iPad Mini (Wi-Fi) (iPad2,5) version 7.1.1 (Build 11D201), Download
- iPad Mini (GSM) (iPad2,6) version 7.1.1 (Build 11D201), Download
- iPad Mini (CDMA) (iPad2,7) version 7.1.1 (Build 11D201), Download
- iPad 3 (Wi-Fi) (iPad3,1) version 7.1.1 (Build 11D201), Download
- iPad 3 (GSM) (iPad3,2) version 7.1.1 (Build 11D201), Download
- iPad 3 (CDMA) (iPad3,3) version 7.1.1 (Build 11D201), Download
- iPad 4 (Wi-Fi) (iPad3,4) version 7.1.1 (Build 11D201), Download
- iPad 4 (GSM) (iPad3,5) version 7.1.1 (Build 11D201), Download
- iPad 4 (CDMA) (iPad3,6) version 7.1.1 (Build 11D201), Download
- iPad4,1 (iPad4,1) version 7.1.1 (Build 11D201), Download
- iPad4,2 (iPad4,2) version 7.1.1 (Build 11D201), Download
- iPad4,3 (iPad4,3) version 7.1.1 (Build 11D201), Download
- iPad4,4 (iPad4,4) version 7.1.1 (Build 11D201), Download
- iPad4,5 (iPad4,5) version 7.1.1 (Build 11D201), Download
- iPad4,6 (iPad4,6) version 7.1.1 (Build 11D201), Download
- iPhone 4 (GSM) (iPhone3,1) version 7.1.1 (Build 11D201), Download
- iPhone 4 (GSM) (2012) (iPhone3,2) version 7.1.1 (Build 11D201), Download
- iPhone 4 (CDMA) (iPhone3,3) version 7.1.1 (Build 11D201), Download
- iPhone 4S (iPhone4,1) version 7.1.1 (Build 11D201), Download
- iPhone 5 (GSM) (iPhone5,1) version 7.1.1 (Build 11D201), Download
- iPhone 5 (CDMA) (iPhone5,2) version 7.1.1 (Build 11D201), Download
- iPhone5,3 (iPhone5,3) version 7.1.1 (Build 11D201), Download
- iPhone5,4 (iPhone5,4) version 7.1.1 (Build 11D201), Download
- iPhone6,1 (iPhone6,1) version 7.1.1 (Build 11D201), Download
- iPhone6,2 (iPhone6,2) version 7.1.1 (Build 11D201), Download
- iPod touch 5G (iPod5,1) version 7.1.1 (Build 11D201), Download
Source: Apple via MacRumors
Tuesday, May 19, 2015
LifeProof launches first Touch ID compatible waterproof case for iPhone 5s
There is no shortage of waterproof cases for the iPhone 5 (or 5s, given that its dimensions are the same), but LifeProofs new protector is the first that is fully compatible with Touch ID, allowing fingerprint sensing through the waterproof layer. But for premium protection youll be paying a premium price: The iPhone 5s nuud case will set you back a cool $89.99US.
Data source: via TUAW (By Mike Wehner)
Origine source: LifeProof
To get one: LifeProof Store
Origine source: LifeProof
To get one: LifeProof Store
Thursday, May 7, 2015
Apples Plans to Enhance Touch ID with Trackpad Capabilities and Display Integration Revealed
Late last week, we highlighted a pair of Apple patent applications offering details on the companys implementation of its "Touch ID" fingerprint sensor in the iPhone 5s.
The highly technical patent applications showed how the system works and revealed that Apple first moved to protect the ideas with the filing of several provisional patent applications in May 2012.
A third Touch ID-related patent application filed by Apple also quietly surfaced last week (via Unwired View) but has flown under the radar until now because it appears to have published on the World Intellectual Property Organizations database but not the U.S. Patent and Trademark Offices database.
This third patent application is the most revealing yet with regard to Touch ID, showing how Apple has envisioned expanding the feature to incorporate trackpad functionalities, tracking movements of a users finger or thumb over the sensor to navigate through user interfaces on the devices screen. In one example, Apple shows how a user moving his or her finger right to left across the Touch ID home button could pan a map, with a subsequent upward movement across the home button triggering activation of a multitasking interface.
Panning a map by moving finger right to left over Touch ID home button
Other examples show how users could take advantage of "revolving" or "twisting" motions of their fingerprints on the Touch ID home button to initiate actions. Adding the ability to recognize presses of various durations for the Touch ID home button and even sensors for detecting how hard the button is being pressed could offer even more powerful user interface navigation capabilities right from the home button.
Moving beyond the home button, Apple addresses the possibility of integrating Touch ID right into a devices display, allowing any area of the screen to be dynamically designated as a sensing region for the users fingerprint. In one example, the area of a display representing the devices email app could require a valid fingerprint touching the icon in order for authorization to be granted.
Authorizing Mail app with Touch ID sensing integrated into device display
Moving beyond the home button, Apple addresses the possibility of integrating Touch ID right into a devices display, allowing any area of the screen to be dynamically designated as a sensing region for the users fingerprint. In one example, the area of a display representing the devices email app could require a valid fingerprint touching the icon in order for authorization to be granted.
Authorizing Mail app with Touch ID sensing integrated into device display
Overall, Apples patent application is a massive 610-page document incorporating 464 claims covering a wide range of applications for Touch ID in the future. Beyond the examples highlighted here, the application covers a number of other areas including:
- Enhanced touch typing recognition through sensing which fingers are touching the keys
- Using pressure and movement sensing to turn the home button into a simple game controller
- Using revolving "scroll wheel" motions on the home button to navigate through multitasking app listings
- Using fingerprint verification to enforce parental controls on age-rated media content, restrict maximum device volume, or automatically increase font sizes for children, seniors, or visually-impaired users
- Autofilling web forms or loading personalized web pages based on fingerprint identification
- Supporting multi-user profiles including authorized and guest profiles through fingerprint authorization
- Authorizing location "check-ins", mobile payment information, or photo/document author tagging based on fingerprint identification
- Supporting simultaneous multi-user configurations by allowing users to define separate areas of a devices screen for drawings, notes, or other content based on fingerprint recognition
Apples patent application was filed on May 20, 2013, but cites as priority several provisional patent applications dated as far back as May 2012.
Data source: via MacRumors (By Eric Slivka)
Subscribe to:
Posts (Atom)